Skip to content

Commit 64be447

Browse files
authored
Fix CodeQL alert: Sandbox attribute is missing on the Iframe (#438)
* Fix CodeQL alert: Sandbox attribute is missing on the Iframe * Update
1 parent 6aae6f8 commit 64be447

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

src/plugins/cordova-plugin-inappbrowser/inapp-browser.js

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -298,6 +298,7 @@ IframeBrowser.prototype.injectStyleFile = function (callback, args) {
298298
IframeBrowser.prototype._createFrame = function () {
299299
this._container = document.createElement('div');
300300
this._iframe = document.createElement('iframe');
301+
this._iframe.sandbox = 'allow-modals allow-popups';
301302

302303
// container style
303304
var style = this._container.style;

0 commit comments

Comments
 (0)